Bump the dependencies group with 12 updates #1790

dependabot · 2023-11-06T06:10:17Z

Bumps the dependencies group with 12 updates:

Package	From	To
com.github.dasniko:testcontainers-keycloak	`3.0.0`	`3.1.0`
commons-io:commons-io	`2.14.0`	`2.15.0`
org.apache.commons:commons-dbcp2	`2.10.0`	`2.11.0`
org.apache.commons:commons-text	`1.10.0`	`1.11.0`
org.eclipse.jetty:jetty-servlet	`10.0.17`	`10.0.18`
org.junit:junit-bom	`5.10.0`	`5.10.1`
org.junit.platform:junit-platform-suite	`1.10.0`	`1.10.1`
org.keycloak:keycloak-servlet-filter-adapter	`22.0.4`	`22.0.5`
io.github.git-commit-id:git-commit-id-maven-plugin	`6.0.0`	`7.0.0`
org.apache.maven.plugins:maven-dependency-plugin	`3.6.0`	`3.6.1`
org.owasp:dependency-check-maven	`8.4.0`	`8.4.2`
org.apache.maven.plugins:maven-surefire-plugin	`3.1.2`	`3.2.1`

Updates com.github.dasniko:testcontainers-keycloak from 3.0.0 to 3.1.0

Release notes

Sourced from com.github.dasniko:testcontainers-keycloak's releases.

v3.1.0

What's Changed

Add support for verbose command line argument dasniko/testcontainers-keycloak#114

Add option to remotely debug Keycloak by @martinleim in dasniko/testcontainers-keycloak#118

New Contributors

@martinleim made their first contribution in dasniko/testcontainers-keycloak#118

Full Changelog: dasniko/testcontainers-keycloak@3.0.0...3.1.0

Commits

dc075d5 [maven-release-plugin] prepare release 3.1.0
2d5bcfa update to 22.0.5
2312d82 update to the latest patch version, as they have introduced some incompatible...
3d1af7f docs for remote debugger support
5148545 Add option to remotely debug Keycloak (#118)
7b00199 add withVerboseOutput() to enable verbose error messages
16bbfff add latest release to compatibility table
fa93588 [maven-release-plugin] prepare for next development iteration
See full diff in compare view

Updates commons-io:commons-io from 2.14.0 to 2.15.0

Updates org.apache.commons:commons-dbcp2 from 2.10.0 to 2.11.0

Updates org.apache.commons:commons-text from 1.10.0 to 1.11.0

Updates org.eclipse.jetty:jetty-servlet from 10.0.17 to 10.0.18

Release notes

Sourced from org.eclipse.jetty:jetty-servlet's releases.

10.0.18

Special Thanks to the following Eclipse Jetty community members

@OlexYarm (OlexYarm)

Changelog

#10786 - TLS handshake failures leak HttpConnection.RequestTimeouts tasks

#10755 - deprecate PushCacheFilter

#10753 - Improve and test jetty.sh behaviors

#10675 - Fixed issue 10305 Embedded Jetty server fails to start when requests path contains not existed directory (@OlexYarm)

#10667 - Add configuration to allow deferring the initial Deployment until after Server is started

#10390 - Jetty HTTP/3 Client fails when connecting to nghttpx server

#1256 - DoSFilter leaks USER_AUTH entries

Commits

8545fd9 Updating to version 10.0.18
95804f6 Merge pull request #10795 from jetty/fix/jetty-10-10786-tls-handshake-schedul...
fa166d0 Fixes #10786 - TLS handshake failures leak HttpConnection.RequestTimeouts tasks
e98c0ae Merge pull request #10791 from jetty/fix/10.0.x/jetty-sh-updates
31b5518 Updates to jetty.sh and testing to reduce failures
92f62a1 Improve and test jetty.sh behaviors (#10753)
8b5deea #10519 do not close the flusher to avoid an ISE when iterating it during idle...
a8a8c8b #10519 check if the stream is still in a usable state when quiche_conn_stream...
caf46b0 #10519 ignore IllegalStateException thrown by flusher when closing
6e7fafa Merge pull request #10755 from jetty/jetty-10.0.x-pushCacheFilter
Additional commits viewable in compare view

Updates org.junit:junit-bom from 5.10.0 to 5.10.1

Release notes

Sourced from org.junit:junit-bom's releases.

JUnit 5.10.1 = Platform 1.10.1 + Jupiter 5.10.1 + Vintage 5.10.1

See Release Notes.

Full Changelog: junit-team/junit5@r5.10.0...r5.10.1

Commits

e5f50d8 Release 5.10.1
ac86d18 Fix typo in AfterAll documentation
388c5be Harmonize application of method and field filters in search algorithms
f82dd1e Apply field predicate before searching type hierarchy
1d1eb85 Polishing
5ce280e Update picocli to 4.7.5 and enable help width computation
fea05c3 Fix ConsoleLauncherTests and StandaloneTests
c556735 Use same expected files for all JDK versions
808493a Run StandaloneTests for Java 8 under Java 8
9ec5766 Unify messages about exit codes in StandaloneTests
Additional commits viewable in compare view

Updates org.junit.platform:junit-platform-suite from 1.10.0 to 1.10.1

Commits

See full diff in compare view

Updates org.keycloak:keycloak-servlet-filter-adapter from 22.0.4 to 22.0.5

Updates io.github.git-commit-id:git-commit-id-maven-plugin from 6.0.0 to 7.0.0

Release notes

Sourced from io.github.git-commit-id:git-commit-id-maven-plugin's releases.

Version 7.0.0 is finally there and includes various bug-fixes and improvements :-)

⚠️ This is a potentially breaking release. Read the release-notes carefully ⚠️

Potential Breaking changes:

The main key-aspects that might cause a breakage when migrating to the new version:

Drop support for Maven 3.1.0-alpha-1 ⚠️

minimal required maven version is now Maven 3.2.5 (to support Maven 4.0.0)

New Features / Bug-Fixes:

The main key-aspects that have been improved or being worked on are the following:

git-commit-id/git-commit-id-maven-plugin#639 / git-commit-id/git-commit-id-maven-plugin#642: Resolve worktree .git files to repository .git directory

Update several plugins

updated git-commit-id-plugin-core from 6.0.0-rc.5 to 6.0.0-rc.6, that update brings

git-commit-id/git-commit-id-plugin-core#57: Stop relying on javax.json 1.1.4

the dependency for javax.json:javax.json-api:1.1.4 was replaced with jakarta.json:jakarta.json-api:2.1.2

the dependency for org.glassfish:javax.json:1.1.4 was replaced with org.eclipse.parsson:parsson:1.1.4

bump jgit from 6.5.0.202303070854-r to 6.7.0.202309050840-r

bump commons-io:commons-io from 2.11.0 to 2.14.0

bump org.slf4j:slf4j-simple from 2.0.7 to 2.0.9

bump several maven plugins

bump maven-plugin-api from 3.1.0-alpha-1 to 3.9.2

bump maven-plugin-plugin from 3.6.0 to 3.9.0

bump maven-assembly-plugin from 3.4.2 to 3.6.0

bump maven-dependency-plugin from 3.5.0 to 3.6.0

bump maven-release-plugin from 3.0.0-M7 to 3.0.1

bump maven-enforcer-plugin from 3.2.1 to 3.4.1

bump maven-compiler-plugin from 3.8.1 to 3.11.0

bump maven-gpg-plugin from 3.1.0

bump maven-clean-plugin from 3.1.0 to 3.3.1

bump maven-resources-plugin from 3.1.0 to 3.3.1

bump maven-jar-plugin from 3.2.0 to 3.3.0

bump maven-surefire-plugin from 2.22.2 to 3.1.2

bump maven-install-plugin from 2.5.2 to 3.1.1

bump maven-javadoc-plugin from 3.2.0 to 3.6.0

bump maven-source-plugin from 3.2.1 to 3.3.0

Bump or replace various plugins for testing

bump commons-io:commons-io from 2.11.0 to 2.14.0 (test dependency)

bump org.slf4j:slf4j-simple from 2.0.7 to 2.0.9 (test dependency)

replace org.eluder.coveralls:coveralls-maven-plugin:4.3.0 with io.jsonwebtoken.coveralls:coveralls-maven-plugin:4.4.1 (test dependency)

Getting the latest release

The plugin is available from Maven Central (see here), so you don't have to configure any additional repositories to use this plugin. All you need to do is to configure it inside your project as dependency:
<dependency>
    <groupId>io.github.git-commit-id</groupId>
    <artifactId>git-commit-id-maven-plugin</artifactId>
    <version>7.0.0</version>
</dependency>
</tr></table> 

... (truncated)

Commits

0fdf9c7 [maven-release-plugin] prepare release v7.0.0
4e33174 bump git-commit-id:git-commit-id-plugin-core from 6.0.0-rc.5 to 6.0.0-rc.6
64b5ce1 Merge pull request #657 from git-commit-id/dependabot/maven/org.mockito-mocki...
b6309d9 Bump org.mockito:mockito-core from 5.5.0 to 5.6.0
4feba8d Merge pull request #642 from jkylling/resolve-worktree-git-dir
59415bf Merge pull request #654 from git-commit-id/dependabot/maven/commons-io-common...
91e2cfe Bump commons-io:commons-io from 2.13.0 to 2.14.0
b1d8440 Resolve worktree .git files to repository .git directory
494cbb6 Merge pull request #649 from git-commit-id/dependabot/github_actions/actions/...
1d31156 Bump actions/checkout from 3 to 4
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-dependency-plugin from 3.6.0 to 3.6.1

Commits

4d18cfb [maven-release-plugin] prepare release maven-dependency-plugin-3.6.1
34348ec [MNG-6847] Use diamond operator
0062083 [MDEP-883] - Upgrade maven-plugin parent to 40
c6973da [MDEP-832] - Remove commons-collections-4
0243c41 Bump org.codehaus.plexus:plexus-archiver from 4.7.1 to 4.8.0
4ed696e Add Javadoc 'author' tag to prevent dangling contributor name
3c877fb MDEP-875 prevent possible NPE
9e479d4 [MDEP-872] update commons-io to 2.13.0 (#326)
03bc34e Tighten language (#327)
694655d MDEP-868 update maven-shared-utils to 3.4.2 (#322)
Additional commits viewable in compare view

Updates org.owasp:dependency-check-maven from 8.4.0 to 8.4.2

Release notes

Sourced from org.owasp:dependency-check-maven's releases.

Version 8.4.2

fix: correct log configuration in cli (#6002)

See the full listing of changes.

Version 8.4.1

fix: upgrade to JCS3 (#5114)

fix: Support ~= version specifier in requirements.txt and pipfile (#5902)

fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#5901)

fix: Do not filter out evidences added by hints (#5900)

fix: fixes FP #5925 (#5927)

See the full listing of changes.

Changelog

Sourced from org.owasp:dependency-check-maven's changelog.

Version 8.4.2 (2023-10-22)

fix: correct log configuration in cli (#6002)

See the full listing of changes.

Version 8.4.1 (2023-10-21)

Fixed

fix: upgrade to JCS3 (#5114)

fix: Support ~= version specifier in requirements.txt and pipfile (#5902)

fix: Version of dependency no longer ignored when CPE product has a 'java' suffix in a product name (#5901)

fix: Do not filter out evidences added by hints (#5900)

fix: fixes FP #5925 (#5927)

See the full listing of changes.

Commits

c15b3b9 build: prepare release v8.4.2
dbdb84d docs: release 8.4.2
74f5156 fix: dependabot config
1162b3e fix: correct log configuration in cli (#6002)
e105540 chore: Release 8.4.1 (#6000)
5cc8df0 build: prepare for next development iteration
61377ad build: prepare release v8.4.1
e2649a6 docs: prepare release
778185b build(deps): bump org.jacoco:jacoco-maven-plugin from 0.8.10 to 0.8.11 (#5994)
81bd778 build(deps): bump se.bjurr.violations:violations-lib from 1.156.6 to 1.156.7 ...
Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-surefire-plugin from 3.1.2 to 3.2.1

Release notes

Sourced from org.apache.maven.plugins:maven-surefire-plugin's releases.

3.2.1

🚀 New features and improvements

[SUREFIRE-1124] - Support forkNumber in environment variables (#664) @swismer

[SUREFIRE-2177] - Use junit-bom instead of single JUnit 5 versions (#663) @scordio

[SUREFIRE-2179] - Support adding additional Maven dependencies to the test runtime classpath (#667) @kwin

[SUREFIRE-2178] - clarify classpathDependencyExcludes (#666) @kwin

[SUREFIRE-2182] - Log starter implementation on DEBUG level (#665) @kwin

🐛 Bug Fixes

[SUREFIRE-2190] - Fix module dependencies for compile only dependencies (#668) @hgschmie

📝 Documentation updates

Fix TestNG web site URL (#671) @sabi0

👻 Maintenance

Fix TestNG web site URL (#671) @sabi0

[MNG-6847] - Use diamond operator (#669) @timtebeek

Commits

df9f657 [maven-release-plugin] prepare release surefire-3.2.1
0910b75 Fix formatting
97c84a1 [maven-release-plugin] prepare for next development iteration
ad0639f [maven-release-plugin] prepare release surefire-3.2.0
edfb965 [SUREFIRE-2196] maven-surefire-report-plugin:failsafe-report-only failed: Unm...
0a5dba8 [SUREFIRE-2188] Upgrade to Parent 40
5a09438 [SUREFIRE-2202] NullPointerException if super class meets specific condition
176937d Simplify temp dir creation
9b79bda [SUREFIRE-1124] Support forkNumber in environment variables
2966964 Fix TestNG web site URL
Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
org.eclipse.jetty:jetty-servlet	[>= 11.a, < 12]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [com.github.dasniko:testcontainers-keycloak](https://github.com/dasniko/testcontainers-keycloak) | `3.0.0` | `3.1.0` | | commons-io:commons-io | `2.14.0` | `2.15.0` | | org.apache.commons:commons-dbcp2 | `2.10.0` | `2.11.0` | | org.apache.commons:commons-text | `1.10.0` | `1.11.0` | | [org.eclipse.jetty:jetty-servlet](https://github.com/eclipse/jetty.project) | `10.0.17` | `10.0.18` | | [org.junit:junit-bom](https://github.com/junit-team/junit5) | `5.10.0` | `5.10.1` | | [org.junit.platform:junit-platform-suite](https://github.com/junit-team/junit5) | `1.10.0` | `1.10.1` | | org.keycloak:keycloak-servlet-filter-adapter | `22.0.4` | `22.0.5` | | [io.github.git-commit-id:git-commit-id-maven-plugin](https://github.com/git-commit-id/git-commit-id-maven-plugin) | `6.0.0` | `7.0.0` | | [org.apache.maven.plugins:maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) | `3.6.0` | `3.6.1` | | [org.owasp:dependency-check-maven](https://github.com/jeremylong/DependencyCheck) | `8.4.0` | `8.4.2` | | [org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire) | `3.1.2` | `3.2.1` | Updates `com.github.dasniko:testcontainers-keycloak` from 3.0.0 to 3.1.0 - [Release notes](https://github.com/dasniko/testcontainers-keycloak/releases) - [Commits](dasniko/testcontainers-keycloak@3.0.0...3.1.0) Updates `commons-io:commons-io` from 2.14.0 to 2.15.0 Updates `org.apache.commons:commons-dbcp2` from 2.10.0 to 2.11.0 Updates `org.apache.commons:commons-text` from 1.10.0 to 1.11.0 Updates `org.eclipse.jetty:jetty-servlet` from 10.0.17 to 10.0.18 - [Release notes](https://github.com/eclipse/jetty.project/releases) - [Commits](jetty/jetty.project@jetty-10.0.17...jetty-10.0.18) Updates `org.junit:junit-bom` from 5.10.0 to 5.10.1 - [Release notes](https://github.com/junit-team/junit5/releases) - [Commits](junit-team/junit5@r5.10.0...r5.10.1) Updates `org.junit.platform:junit-platform-suite` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/junit-team/junit5/releases) - [Commits](https://github.com/junit-team/junit5/commits) Updates `org.keycloak:keycloak-servlet-filter-adapter` from 22.0.4 to 22.0.5 Updates `io.github.git-commit-id:git-commit-id-maven-plugin` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/git-commit-id/git-commit-id-maven-plugin/releases) - [Commits](git-commit-id/git-commit-id-maven-plugin@v6.0.0...v7.0.0) Updates `org.apache.maven.plugins:maven-dependency-plugin` from 3.6.0 to 3.6.1 - [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.6.0...maven-dependency-plugin-3.6.1) Updates `org.owasp:dependency-check-maven` from 8.4.0 to 8.4.2 - [Release notes](https://github.com/jeremylong/DependencyCheck/releases) - [Changelog](https://github.com/jeremylong/DependencyCheck/blob/main/CHANGELOG.md) - [Commits](jeremylong/DependencyCheck@v8.4.0...v8.4.2) Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.1.2 to 3.2.1 - [Release notes](https://github.com/apache/maven-surefire/releases) - [Commits](apache/maven-surefire@surefire-3.1.2...surefire-3.2.1) --- updated-dependencies: - dependency-name: com.github.dasniko:testcontainers-keycloak dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: commons-io:commons-io dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-dbcp2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.apache.commons:commons-text dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: org.eclipse.jetty:jetty-servlet dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.junit:junit-bom dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.junit.platform:junit-platform-suite dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.keycloak:keycloak-servlet-filter-adapter dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: io.github.git-commit-id:git-commit-id-maven-plugin dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-dependency-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.owasp:dependency-check-maven dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: org.apache.maven.plugins:maven-surefire-plugin dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2023-11-07T06:33:55Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Nov 6, 2023

This was referenced Nov 6, 2023

Bump com.github.dasniko:testcontainers-keycloak from 3.0.0 to 3.1.0 #1783

Closed

Bump org.junit.platform:junit-platform-suite from 1.10.0 to 1.10.1 #1785

Closed

Bump org.junit:junit-bom from 5.10.0 to 5.10.1 #1784

Closed

dependabot bot closed this Nov 7, 2023

dependabot bot deleted the dependabot/maven/v2.x/dependencies-552eb7222e branch November 7, 2023 06:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the dependencies group with 12 updates #1790

Bump the dependencies group with 12 updates #1790

dependabot bot commented on behalf of github Nov 6, 2023 •

edited

Loading

dependabot bot commented on behalf of github Nov 7, 2023

Bump the dependencies group with 12 updates #1790

Bump the dependencies group with 12 updates #1790

Conversation

dependabot bot commented on behalf of github Nov 6, 2023 • edited Loading

v3.1.0

What's Changed

New Contributors

10.0.18

Special Thanks to the following Eclipse Jetty community members

Changelog

Potential Breaking changes:

New Features / Bug-Fixes:

Getting the latest release

Version 8.4.2

Version 8.4.1

Version 8.4.2 (2023-10-22)

Version 8.4.1 (2023-10-21)

Fixed

3.2.1

🚀 New features and improvements

🐛 Bug Fixes

📝 Documentation updates

👻 Maintenance

dependabot bot commented on behalf of github Nov 7, 2023

dependabot bot commented on behalf of github Nov 6, 2023 •

edited

Loading